Description
VMware存在代码注入漏洞。此漏洞是由于pdfexport对于onwebkitanimationstart参数缺乏验证导致的。
VMware Aria Operations for Networks exportPDF 代码注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.zerodayinitiative.com/advisories/ZDI-23-842/
https://nvd.nist.gov/vuln/detail/cve-2023-20889
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23674
https://www.hkcert.org/tc/security-bulletin/vmware-aria-operations-for-networks-multiple-vulnerabilities_20230609
https://www.fortiguard.fortinet.com/tw/outbreak-alert/vmware-aria-command-injection
https://www.govcert.gov.hk/tc/alerts_detail.php?id=1038
https://www.cloudsek.com/blog/cve-2023-20887-leads-to-rce-in-vmware-aria-operations-for-networks
https://www.h3c.com/cn/d_202309/1930999_30003_0.htm
https://threatprotect.qualys.com/2023/06/15/vmware-patched-multiple-critical-vulnerabilities-in-aria-operations-for-networks-cve-2023-20887-cve-2023-20888-and-cve-2023-20889/
https://www.tenable.com/plugins/nessus/177347
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:CTS:VMWARE-ARIA-PDF-RCE.html
https://vulners.com/search?query=reporter%3A%22Sina%20Kheirkhah%20%28%40SinSinology%29%20of%20Summoning%20Team%20%28%40SummoningTeam%29%22&skip=80